$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IOc2oaMHBTFfY7PnraeGr_KerXM.roa File: IOc2oaMHBTFfY7PnraeGr_KerXM.roa (raw, json) Hash identifier: b2WAzIrdsAHWuq20q6lER7hOgtkZjdbZU2X1tkrk0PE= Subject key identifier: 20:E7:36:A1:A3:07:05:31:5F:63:B3:E7:AD:A7:86:AF:F2:9E:AD:73 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1936 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IOc2oaMHBTFfY7PnraeGr_KerXM.roa Signing time: Fri 22 Aug 2025 09:02:52 +0000 ROA not before: Fri 22 Aug 2025 09:02:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3462 IP address blocks: 122.116.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6454 (0x1936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 22 09:02:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=20E736A1A30705315F63B3E7ADA786AFF29EAD73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:66:13:98:df:87:d8:c5:d1:12:cb:cd:e1: 0c:70:24:5c:c7:57:4c:76:75:93:72:a6:89:c5:38: 10:8a:8b:0e:f3:cc:2a:86:84:92:28:26:21:6e:b3: 03:b8:19:7e:92:a3:d3:67:e8:b6:5b:8b:ce:17:f7: b8:3c:83:f0:e8:b5:ad:db:fb:8f:ee:48:13:7a:67: 55:9b:35:04:b6:78:83:07:89:c7:cf:3e:13:48:e4: f3:bc:d9:f4:74:c2:d1:60:e4:ff:df:46:4b:d5:4f: be:7b:02:40:fc:6d:e0:51:a9:7d:e6:3f:1a:43:1c: b0:60:8c:56:6f:e0:b8:6b:0e:4d:9e:b1:9c:3e:fb: 3f:7d:2d:60:1e:ad:1c:e3:01:36:59:04:a6:2e:88: 9a:66:a7:17:7c:92:73:a8:0d:e8:88:0e:cc:14:fd: e4:dc:0a:dc:5b:a7:e8:f0:42:f0:c5:80:a8:b8:94: 2b:b6:cc:7e:49:e9:bc:71:54:7d:f2:fb:60:2e:51: 07:12:54:1b:47:5f:2e:97:5e:df:68:af:00:8b:63: 3a:d4:84:a1:4f:9b:53:37:fd:d4:59:79:cf:f5:a5: bb:87:b3:4f:ec:30:3c:ca:70:67:f9:be:d2:bf:ed: a6:16:1c:5c:63:9d:ff:e2:7c:1d:b2:a4:55:cb:d1: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E7:36:A1:A3:07:05:31:5F:63:B3:E7:AD:A7:86:AF:F2:9E:AD:73 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IOc2oaMHBTFfY7PnraeGr_KerXM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.116.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6a:25:a6:f3:39:81:ea:62:b1:97:8b:ee:46:d2:9c:9c:b5:60: ed:57:3e:58:3b:46:89:71:09:2e:41:d1:80:89:ef:84:89:08: e9:12:f7:10:86:3c:e0:b8:bf:75:23:93:45:fd:a9:03:ce:61: b3:7f:de:69:cc:8e:35:f0:ea:91:10:be:57:00:93:0b:62:21: 72:e8:4d:c6:41:23:69:6e:e8:bc:b0:65:0c:96:70:5a:56:0e: 15:f6:e9:a4:00:a2:73:9e:ae:8c:50:5a:57:a2:2e:c0:b7:cb: 8e:a5:a0:5c:31:0a:b5:c0:fd:f0:61:aa:8c:ef:27:4a:36:33: 67:09:7d:49:9f:38:54:b5:88:4d:c9:6f:af:1d:56:9b:c4:e2: 48:b9:3b:fc:32:7e:04:5a:25:1c:5d:00:15:28:05:a1:b2:46: 40:9f:21:67:bc:3a:46:0a:63:6f:2b:5c:72:23:98:17:24:f5: bc:70:29:6e:46:b9:51:dc:02:b5:52:12:a4:0f:97:c4:fa:10: ce:fd:18:0f:0f:d2:d3:31:26:04:fd:a3:70:27:e8:7b:f9:6e: 78:55:2e:d1:56:cb:ea:3a:42:b9:b6:69:97:86:9d:6e:ad:a8: a9:13:6c:c5:aa:4f:ff:e2:51:c7:84:c8:0c:ca:b7:4f:25:4a: c0:89:64:6e -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTA4MjIw OTAyNTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwRTczNkExQTMwNzA1 MzE1RjYzQjNFN0FEQTc4NkFGRjI5RUFENzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwPGYTmN+H2MXREsvN4QxwJFzHV0x2dZNyponFOBCKiw7zzCqG hJIoJiFuswO4GX6So9Nn6LZbi84X97g8g/Dota3b+4/uSBN6Z1WbNQS2eIMHicfP PhNI5PO82fR0wtFg5P/fRkvVT757AkD8beBRqX3mPxpDHLBgjFZv4LhrDk2esZw+ +z99LWAerRzjATZZBKYuiJpmpxd8knOoDeiIDswU/eTcCtxbp+jwQvDFgKi4lCu2 zH5J6bxxVH3y+2AuUQcSVBtHXy6XXt9orwCLYzrUhKFPm1M3/dRZec/1pbuHs0/s MDzKcGf5vtK/7aYWHFxjnf/ifB2ypFXL0XRBAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUIOc2oaMHBTFfY7PnraeGr/KerXMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9JT2Myb2FNSEJURmZZN1BucmFl R3JfS2VyWE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBenQw DQYJKoZIhvcNAQELBQADggEBAGolpvM5gepisZeL7kbSnJy1YO1XPlg7RolxCS5B 0YCJ74SJCOkS9xCGPOC4v3Ujk0X9qQPOYbN/3mnMjjXw6pEQvlcAkwtiIXLoTcZB I2lu6LywZQyWcFpWDhX26aQAonOeroxQWleiLsC3y46loFwxCrXA/fBhqozvJ0o2 M2cJfUmfOFS1iE3Jb68dVpvE4ki5O/wyfgRaJRxdABUoBaGyRkCfIWe8OkYKY28r XHIjmBck9bxwKW5GuVHcArVSEqQPl8T6EM79GA8P0tMxJgT9o3An6Hv5bnhVLtFW y+o6Qrm2aZeGnW6tqKkTbMWqT//iUceEyAzKt08lSsCJZG4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:16 2025 by rpki-client